Threat Library

excel-mcp-server version 0.1.8, a Model Context Protocol (MCP) server used to give AI agents Excel file manipulation capabilities, fails to restrict file access to a designated directory when running in stdio mode without EXCEL_FILES_PATH configured. This allows an attacker-controlled or malicious tool call to read or write arbitrary files accessible to the server process, enabling data exfiltration, config tampering, or code/config injection on the host.

The Divi Ajax Filter plugin for WordPress (versions up to 5.1.2) contains an unauthenticated Local File Inclusion vulnerability via the 'custom_loop_template' parameter, allowing attackers to include and execute arbitrary PHP files on the server. With a CVSS score of 9.8, this flaw can lead to full remote code execution, data exposure, and access control bypass on affected WordPress installations.

MOOS-IvP, an autonomous marine vehicle behavior and control framework, contains a critical buffer overflow vulnerability in its IvP function parsing logic (CVE-2026-85438). Attackers who can supply crafted BHV_IPF payloads can trigger out-of-bounds writes leading to memory corruption and potential remote code execution. This affects autonomous vehicle control software rather than typical enterprise AI agent stacks, though similar parsing patterns are common in agent tool pipelines.

A previously undocumented Linux backdoor named 'Ted' has been discovered compiled directly into trojanized HAProxy load balancer builds at two South Korean organizations. The implant intercepts and manipulates web traffic, serving altered content to selected visitors, indicating a targeted, capability-focused intrusion rather than opportunistic malware distribution.

A 12-year-old flaw in PostgreSQL's logical decoding feature allows a database role with REPLICATION privileges to escalate to arbitrary code execution as the OS user running the database server. PostgreSQL has released patched versions across all supported major releases to address CVE-2026-6471.

Microsoft identified a high-volume phishing campaign that embeds invisible Unicode tag characters within financial lure words (e.g., 'funding') to evade traditional email security filters. The technique splits keywords at the character level so pattern-matching and keyword-based detection engines fail to flag the malicious content, while the text still renders normally to human recipients.

Microsoft has acknowledged a known technical issue causing delays or outright failures when some users attempt to open the Microsoft Teams desktop client on Windows systems. This is a service reliability/availability problem rather than a security incident, with Microsoft actively working on a resolution.

A critical authentication bypass vulnerability in Citrix NetScaler (CVE-2026-19490) is being actively exploited in the wild, as reported by vulnerability intelligence firm Previdian. The flaw allows attackers to bypass authentication controls on NetScaler ADC/Gateway appliances, potentially granting unauthorized access to internal networks and sensitive resources.

IDScan, an identity verification company, allegedly suffered a data breach in which threat actors claim to have obtained and offered for sale over 153 million driver's license records. The company now faces multiple lawsuits related to the incident. Details on the initial attack vector remain undisclosed publicly.

A critical stack-based buffer overflow vulnerability affects Pyramid Solutions NetStaX EtherNet/IP Stack products prior to v5.6.1, used across industrial control system (ICS) devices. Exploitation via oversized Class 3 explicit-message requests could cause memory corruption, device crashes, or remote code execution without any CIP error notification, posing significant risk to critical manufacturing, energy, water, and chemical sectors.

Tycon Systems TPDIN-Monitor-WEB3 firmware versions 2.2.9 and earlier contain three vulnerabilities—hard-coded credentials, CSRF, and missing authorization—that could allow an attacker to intercept sensitive data, perform state-changing operations, or extract system credentials, configurations, and flash contents. These devices are deployed worldwide in Critical Manufacturing and Energy sectors, and successful exploitation could enable man-in-the-middle attacks, factory resets, credential wipes, or full information disclosure. Tycon Systems has released firmware v2.4.2 to remediate all three issues.

CISA has added CVE-2026-85046, a type confusion vulnerability in Google Chromium's V8 JavaScript engine, to its Known Exploited Vulnerabilities catalog based on evidence of active exploitation. Federal agencies are required under BOD 26-04 to remediate this vulnerability on a prioritized timeline, and all organizations are encouraged to patch given confirmed in-the-wild exploitation.

A critical authorization flaw in MOOS essential-moos pShare (through 10.0.1) allows any publisher on the bus to send crafted PSHARE_CMD messages that reconfigure network routes and listeners at runtime. This enables attackers to redirect or duplicate sensitive inter-process communication traffic to attacker-controlled destinations without authentication, posing severe risks to robotics and autonomous system deployments that rely on MOOS for message passing.

A critical authentication bypass vulnerability exists in the optional MOOSDB HTTP server component of MOOS core-moos through version 10.4.0, allowing unauthenticated attackers to write arbitrary MOOS variables including actuator and override commands. This could enable remote attackers to hijack control of autonomous vehicles or robotic systems that rely on MOOS-IvP for mission control and coordination.

python-jose through version 3.5.0 contains an incomplete fix for a prior key-confusion vulnerability (CVE-2024-33663), allowing attackers who possess a service's RSA/EC public key to forge valid HS256-signed JWTs when the verifying application does not explicitly restrict accepted algorithms. This enables full authentication bypass against any system relying on python-jose for JWT verification without strict algorithm allowlisting.

Taipy, a Python framework used to build data and AI application front-ends, ships with a Socket.IO server configuration that combines wildcard CORS origins with credentialed connections enabled. This allows any malicious webpage to establish authenticated WebSocket sessions with a victim's running Taipy application and directly invoke state changes and backend callbacks without CSRF protection, effectively granting remote attackers unauthorized control over application logic and data.

A critical unauthenticated remote buffer overflow vulnerability has been identified in TOTOLINK CP450 4.1.0 routers, exploitable via the topicurl parameter in the /cgi-bin/cstecgi.cgi endpoint. With a CVSS score of 9.9, this flaw allows remote attackers to potentially execute arbitrary code or crash the device without authentication.

A type confusion vulnerability in Google Chromium's V8 JavaScript engine allows remote attackers to execute arbitrary code within the browser sandbox via a crafted HTML page. The flaw affects all Chromium-based browsers, including Google Chrome, Microsoft Edge, and Opera, and is listed in CISA's Known Exploited Vulnerabilities catalog with an active exploitation status and a remediation deadline of September 18, 2026.

BraZetsu is a Python-based Windows malware framework used by Initial Access Brokers (IABs) to commoditize compromised hosts on underground marketplaces. Rather than acting as a standard infostealer, it functions as a comprehensive toolkit that profiles, categorizes, and packages victim systems for resale to other threat actors, including ransomware operators.

Cisco disclosed a critical unauthenticated remote code execution vulnerability (CVE-2026-20212, CVSS 9.8) affecting 10 Silicon One-based Nexus 9000 switch models, allowing attackers to execute code as root without credentials. Alongside this, Cisco released an IOS XR hardening bundle addressing 7 CVEs, two rated 9.8, with no available workarounds for any affected IOS XR version, making immediate patching the only mitigation.